CVE-2021-38415— Fuji Electric Tellus Lite V-Simulator heap based buffer overflow
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-38415
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Fuji Electric Tellus Lite V-Simulator heap based buffer overflow
Source: NVD (National Vulnerability Database)
Vulnerability Description
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
堆缓冲区溢出
Source: NVD (National Vulnerability Database)
Vulnerability Title
Fuji Electric V-Server Lite 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Fuji Electric V-Server Lite是日本Fuji Electric公司的一款用于工业环境的远程监控软件。该软件可收集PLC、温度控制器、逆变器等设备的信息。 Fuji Electric Tellus Lite V-Simulator and V-Server Lite存在安全漏洞，该漏洞源于。解析一个特别制作的项目文件可能会导致基于堆的缓冲区溢出，这可能会允许攻击者可利用该漏洞执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Fuji Electric | V-Server Lite | unspecified ~ 4.0.12.0 | - | |
| Fuji Electric | Tellus Lite V-Simulator | unspecified ~ 4.0.12.0 | - |
II. Public POCs for CVE-2021-38415
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-38415
请登录查看更多情报信息。
- Fuji Electric Tellus Lite V-Simulator and V-Server Lite | CISAx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-38415
Same Patch Batch · Fuji Electric · 2021-12-20 · 6 CVEs total
| CVE-2021-38401 | 7.8 HIGH | Fuji Electric Tellus Lite V-Simulator untrusted pointer dereference |
| CVE-2021-38409 | 7.8 HIGH | Fuji Electric Tellus Lite V-Simulator uninitialized pointer |
| CVE-2021-38413 | 7.8 HIGH | Fuji Electric Tellus Lite V-Simulator stack based buffer overflow |
| CVE-2021-38419 | 7.8 HIGH | Fuji Electric Tellus Lite V-Simulator out of bounds write |
| CVE-2021-38421 | 7.8 HIGH | Fuji Electric Tellus Lite V-Simulator out of bounds read |
IV. Related Vulnerabilities
Same product: V-Server Lite
- CVE-2021-38419
Fuji Electric Tellus Lite V-Simulator out of bounds write - CVE-2021-38413
Fuji Electric Tellus Lite V-Simulator stack based buffer ove - CVE-2021-38421
Fuji Electric Tellus Lite V-Simulator out of bounds read - CVE-2021-38401
Fuji Electric Tellus Lite V-Simulator untrusted pointer dere - CVE-2021-38409
Fuji Electric Tellus Lite V-Simulator uninitialized pointer
Same vendor: Fuji Electric
- CVE-2025-53524
Fuji Electric Monitouch V-SFT-6 Out-of-bounds Write - CVE-2025-54526
Fuji Electric Monitouch V-SFT-6 Stack-based Buffer Overflow - CVE-2025-54496
Fuji Electric Monitouch V-SFT-6 Heap-based Buffer Overflow - CVE-2025-9365
Fuji Electric FRENIC-Loader 4 Deserialization of Untrusted D - CVE-2025-41388
Fuji Electric Smart Editor Stack-based Buffer Overflow
Same weakness: CWE-122
- CVE-2026-8261
Squirrel sqobject.cpp Load heap-based overflow - CVE-2026-8213
OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow - CVE-2026-8212
OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow - CVE-2026-42309
Pillow: Heap buffer overflow with nested list coordinates - CVE-2026-45130
Vim: Heap Buffer Overflow in spell file loading
V. Comments for CVE-2021-38415
No comments yet